General
- Target 2026-07-29_c4b78e6e88a0a158f6b06076ce81210e_amadey_elex_smoke-loader_stealc_stop
- Size 477KB
- Sample260729-ya661sen7s
- SHA256 6e4c87baddde867da197f8dd52dc75edbaae8cced79859ea7aa8a855388e17ac
- MD5 c4b78e6e88a0a158f6b06076ce81210e
- SHA1 3db9c02394712cca9787665942e1589d1d2d7081
- SHA512 c2881bfda868017c5644c14a6f08c262ea041047b4ff27703f173979842466fba2c9e7b4056531005201a4dad164a156f32b2a304ba4a0b51ad9031bc3e89ffd
- SSDEEP 3072:fQLWOnFiCnkIDSrySPnhl0Cj/irN833f+y7bQ6wvCIWf2JjBX+ZflcfRzT+v7Mg7:4ACTD4Pbn3f+yfwKIW+fcflcf+S7i
- TLSH T1D3A44AD12DC18C31E5730B304BA49E7DFDE9FC356960A97AAB8035293A32A91C2D171F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_c4b78e6e88a0a158f6b06076ce81210e_amadey_elex_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_c4b78e6e88a0a158f6b06076ce81210e_amadey_elex_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_c4b78e6e88a0a158f6b06076ce81210e_amadey_elex_smoke-loader_stealc_stop
- Size 477KB
- SHA256 6e4c87baddde867da197f8dd52dc75edbaae8cced79859ea7aa8a855388e17ac
- MD5 c4b78e6e88a0a158f6b06076ce81210e
- SHA1 3db9c02394712cca9787665942e1589d1d2d7081
- SHA512 c2881bfda868017c5644c14a6f08c262ea041047b4ff27703f173979842466fba2c9e7b4056531005201a4dad164a156f32b2a304ba4a0b51ad9031bc3e89ffd
- SSDEEP 3072:fQLWOnFiCnkIDSrySPnhl0Cj/irN833f+y7bQ6wvCIWf2JjBX+ZflcfRzT+v7Mg7:4ACTD4Pbn3f+yfwKIW+fcflcf+S7i
- TLSH T1D3A44AD12DC18C31E5730B304BA49E7DFDE9FC356960A97AAB8035293A32A91C2D171F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates processes with tasklist
-
Executes a VBScript file via the Windows Script Host.